{"resultsPerPage":44,"startIndex":0,"totalResults":44,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-05T17:00:07.048","vulnerabilities":[{"cve":{"id":"CVE-2022-29966","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2026-11-03T23:17:20.353","lastModified":"2026-11-03T23:17:20.353","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Emerson","product":"Ovation","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"Version 3.8.0 Feature Pack 1","versionType":"custom","status":"affected"},{"version":"3.8.0 Feature Pack 3","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2024/icsa-24-158-02.json","source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-02","source":"ics-cert@hq.dhs.gov"}]}},{"cve":{"id":"CVE-2022-30267","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2026-11-03T23:17:21.860","lastModified":"2026-11-03T23:17:21.860","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Emerson Ovation \nwas found to have no authentication of firmware signing and relies on an insecure checksum for integrity. This could allow an attacker to push malicious firmware images, cause a denial-of-service condition, or achieve remote code execution."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Emerson","product":"Ovation","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"Version 3.8.0 Feature Pack 1","versionType":"custom","status":"affected"},{"version":"3.8.0 Feature Pack 3","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2024/icsa-24-158-02.json","source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-02","source":"ics-cert@hq.dhs.gov"}]}},{"cve":{"id":"CVE-2026-103429","sourceIdentifier":"cve@gitlab.com","published":"2026-11-03T23:17:24.327","lastModified":"2026-11-03T23:17:24.327","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-104608","sourceIdentifier":"product-cna@github.com","published":"2026-11-03T23:17:24.420","lastModified":"2026-11-03T23:17:24.420","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment secrets. Exploitation required per-build memory offsets; failed attempts crashed babeld. This affected all releases prior to 3.23 and was fixed in 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program."}],"affected":[{"source":"product-cna@github.com","affectedData":[{"vendor":"GitHub","product":"Enterprise Server","defaultStatus":"unknown","versions":[{"version":"3.19.0","lessThan":"3.19.*","versionType":"semver","status":"affected","changes":[{"at":"3.19.14","status":"unaffected"}]},{"version":"3.20.0","lessThan":"3.20.*","versionType":"semver","status":"affected","changes":[{"at":"3.20.10","status":"unaffected"}]},{"version":"3.21.0","lessThan":"3.21.*","versionType":"semver","status":"affected","changes":[{"at":"3.21.8","status":"unaffected"}]},{"version":"3.22.0","lessThan":"3.22.*","versionType":"semver","status":"affected","changes":[{"at":"3.22.3","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV40":[{"source":"product-cna@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"weaknesses":[{"source":"product-cna@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"},{"lang":"en","value":"CWE-1265"}]}],"references":[{"url":"https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.14","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.10","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.8","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.22/admin/release-notes#3.22.3","source":"product-cna@github.com"}]}},{"cve":{"id":"CVE-2026-107916","sourceIdentifier":"cve@gitlab.com","published":"2026-11-03T23:17:24.597","lastModified":"2026-11-03T23:17:24.597","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-108324","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:24.660","lastModified":"2026-11-03T23:17:24.810","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed a denial of service vulnerability in Tanium Client."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Tanium Client","versions":[{"version":"7.8.2","lessThan":"7.8.2.1258","versionType":"custom","status":"affected"},{"version":"7.8.4","lessThan":"7.8.4.1394","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-086","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-108327","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:24.900","lastModified":"2026-11-03T23:17:25.027","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed a path traversal vulnerability in Tanium Data Service."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Tanium Data Service","versions":[{"version":"4.1","lessThan":"4.1.281","versionType":"custom","status":"affected"},{"version":"4.2","lessThan":"4.2.360","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Interact","versions":[{"version":"3.5.0","lessThan":"3.5.141","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":0.7,"impactScore":4.2}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-082","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-108516","sourceIdentifier":"cve@gitlab.com","published":"2026-11-03T23:17:25.070","lastModified":"2026-11-03T23:17:25.070","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-109836","sourceIdentifier":"vultures@jpcert.or.jp","published":"2026-11-03T23:17:25.697","lastModified":"2026-11-03T23:17:25.697","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"ALCPU","product":"Core Temp","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV30":[{"source":"vultures@jpcert.or.jp","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}]},"weaknesses":[{"source":"vultures@jpcert.or.jp","type":"Primary","description":[{"lang":"en","value":"CWE-782"}]}],"references":[{"url":"http://www.alcpu.com/CoreTemp","source":"vultures@jpcert.or.jp"},{"url":"https://jvn.jp/en/jp/JVN23328936/","source":"vultures@jpcert.or.jp"}]}},{"cve":{"id":"CVE-2026-110288","sourceIdentifier":"product-cna@github.com","published":"2026-11-03T23:17:25.910","lastModified":"2026-11-03T23:17:25.910","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a cross-site GET request to the integration removal endpoint without a CSRF token. Exploitation required configured ChatOps integrations and an operator visiting attacker-controlled content while signed in to the Management Console; deletion could disrupt ChatOps notifications and commands when configuration was applied or services reloaded. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.23 and was fixed in versions 3.19.14, 3.20.10, 3.21.8, and 3.22.3. This vulnerability was reported via the GitHub Bug Bounty program."}],"affected":[{"source":"product-cna@github.com","affectedData":[{"vendor":"GitHub","product":"Enterprise Server","defaultStatus":"unknown","versions":[{"version":"3.19.0","lessThan":"3.19.*","versionType":"semver","status":"affected","changes":[{"at":"3.19.14","status":"unaffected"}]},{"version":"3.20.0","lessThan":"3.20.*","versionType":"semver","status":"affected","changes":[{"at":"3.20.10","status":"unaffected"}]},{"version":"3.21.0","lessThan":"3.21.*","versionType":"semver","status":"affected","changes":[{"at":"3.21.8","status":"unaffected"}]},{"version":"3.22.0","lessThan":"3.22.*","versionType":"semver","status":"affected","changes":[{"at":"3.22.3","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV40":[{"source":"product-cna@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"weaknesses":[{"source":"product-cna@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"references":[{"url":"https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.14","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.10","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.8","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.22/admin/release-notes#3.22.3","source":"product-cna@github.com"}]}},{"cve":{"id":"CVE-2026-111085","sourceIdentifier":"cve@gitlab.com","published":"2026-11-03T23:17:26.067","lastModified":"2026-11-03T23:17:26.067","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-116646","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:30.423","lastModified":"2026-11-03T23:17:30.530","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-097","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116648","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:30.567","lastModified":"2026-11-03T23:17:30.683","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper output sanitization vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-1236"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-084","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116650","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:30.723","lastModified":"2026-11-03T23:17:30.850","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an unauthorized code execution vulnerability in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-095","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116651","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:30.887","lastModified":"2026-11-03T23:17:31.000","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an unauthorized code execution vulnerability in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-088","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116652","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.033","lastModified":"2026-11-03T23:17:31.143","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed a business logic error in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-628"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-081","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116653","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.190","lastModified":"2026-11-03T23:17:31.303","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper input validation vulnerability in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-090","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116654","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.347","lastModified":"2026-11-03T23:17:31.460","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper input validation vulnerability in Threat Response."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-083","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116661","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.500","lastModified":"2026-11-03T23:17:31.613","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper access controls vulnerability in Enforce."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Enforce","versions":[{"version":"3.0.0","lessThan":"3.0.373","versionType":"custom","status":"affected"},{"version":"2.10.0","lessThan":"2.10.778","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-096","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116663","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.647","lastModified":"2026-11-03T23:17:31.760","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper access controls vulnerability in Enforce."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Enforce","versions":[{"version":"3.0.0","lessThan":"3.0.373","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-099","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116664","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.797","lastModified":"2026-11-03T23:17:31.917","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper access controls vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-091","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116665","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:31.963","lastModified":"2026-11-03T23:17:32.087","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an information disclosure vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-094","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116666","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:32.123","lastModified":"2026-11-03T23:17:32.257","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an information disclosure vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-093","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116667","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:32.300","lastModified":"2026-11-03T23:17:32.420","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper access controls vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-085","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116668","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:32.460","lastModified":"2026-11-03T23:17:32.877","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an uncontrolled resource consumption vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"},{"version":"4.15.0","lessThan":"4.15.218","versionType":"custom","status":"affected"},{"version":"4.10.0","lessThan":"4.10.204","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-098","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-116669","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:32.923","lastModified":"2026-11-03T23:17:33.047","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper access controls vulnerability in Discover."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Discover","versions":[{"version":"4.19.0","lessThan":"4.19.137","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-087","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-118237","sourceIdentifier":"product-cna@github.com","published":"2026-11-03T23:17:33.217","lastModified":"2026-11-03T23:17:33.217","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving possession of a host key, babeld's SSH implementation sized the session identifier by the current digest length rather than its own. An attacker with an account and SSH access could re-key to an algorithm with a longer hash, causing adjacent process memory to be signed and returned to the client, where a limited amount of it may be recoverable. This vulnerability affected all releases prior to 3.23 and was fixed in versions 3.22.3, 3.21.8, 3.20.10, and 3.19.14. This vulnerability was reported via the GitHub Bug Bounty program."}],"affected":[{"source":"product-cna@github.com","affectedData":[{"vendor":"GitHub","product":"Enterprise Server","defaultStatus":"unknown","versions":[{"version":"3.19.0","lessThan":"3.19.*","versionType":"semver","status":"affected","changes":[{"at":"3.19.14","status":"unaffected"}]},{"version":"3.20.0","lessThan":"3.20.*","versionType":"semver","status":"affected","changes":[{"at":"3.20.10","status":"unaffected"}]},{"version":"3.21.0","lessThan":"3.21.*","versionType":"semver","status":"affected","changes":[{"at":"3.21.8","status":"unaffected"}]},{"version":"3.22.0","lessThan":"3.22.*","versionType":"semver","status":"affected","changes":[{"at":"3.22.3","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV40":[{"source":"product-cna@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"weaknesses":[{"source":"product-cna@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.14","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.10","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.21/admin/release-notes#3.21.8","source":"product-cna@github.com"},{"url":"https://docs.github.com/en/enterprise-server@3.22/admin/release-notes#3.22.3","source":"product-cna@github.com"}]}},{"cve":{"id":"CVE-2026-120775","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:33.527","lastModified":"2026-11-03T23:17:33.633","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed a heap-based buffer overflow vulnerability in Deploy."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"Deploy","versions":[{"version":"2.45.0","lessThan":"2.45.322","versionType":"custom","status":"affected"},{"version":"2.40.0","lessThan":"2.40.235","versionType":"custom","status":"affected"},{"version":"2.36.0","lessThan":"2.36.294","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-089","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-121520","sourceIdentifier":"security@docker.com","published":"2026-11-03T23:17:34.177","lastModified":"2026-11-03T23:17:34.177","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. namespaces may also be set, potentially giving a program on the host elevated privileges. This issue affects build services that accept build requests from untrusted users. The issue is fixed in v0.34.1."}],"affected":[{"source":"security@docker.com","affectedData":[{"vendor":"Moby","product":"BuildKit","defaultStatus":"unaffected","repo":"https://github.com/moby/buildkit","versions":[{"version":"0","lessThan":"0.34.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@docker.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"weaknesses":[{"source":"security@docker.com","type":"Secondary","description":[{"lang":"en","value":"CWE-61"}]}],"references":[{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-w26x-xg27-7qjc","source":"security@docker.com"}]}},{"cve":{"id":"CVE-2026-121535","sourceIdentifier":"cna@vuldb.com","published":"2026-11-03T23:17:34.503","lastModified":"2026-11-04T19:17:30.547","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87. This vulnerability affects the function checkPassword of the file app/src/server.js of the component Room Action Handler. The manipulation results in improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The exploit has been made public and could be used. Upgrading to version 2.1.38 is able to resolve this issue. The patch is identified as 55bec1d05f931d2e43633d6d0b7274f79ec719dd. Upgrading the affected component is advised."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"miroslavpejic85","product":"MiroTalk P2P","cpes":["cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:*"],"modules":["Room Action Handler"],"versions":[{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.0.2","status":"affected"},{"version":"2.0.3","status":"affected"},{"version":"2.0.4","status":"affected"},{"version":"2.0.5","status":"affected"},{"version":"2.0.6","status":"affected"},{"version":"2.0.7","status":"affected"},{"version":"2.0.8","status":"affected"},{"version":"2.0.9","status":"affected"},{"version":"2.0.10","status":"affected"},{"version":"2.0.11","status":"affected"},{"version":"2.0.12","status":"affected"},{"version":"2.0.13","status":"affected"},{"version":"2.0.14","status":"affected"},{"version":"2.0.15","status":"affected"},{"version":"2.0.16","status":"affected"},{"version":"2.0.17","status":"affected"},{"version":"2.0.18","status":"affected"},{"version":"2.0.19","status":"affected"},{"version":"2.0.20","status":"affected"},{"version":"2.0.21","status":"affected"},{"version":"2.0.22","status":"affected"},{"version":"2.0.23","status":"affected"},{"version":"2.0.24","status":"affected"},{"version":"2.0.25","status":"affected"},{"version":"2.0.26","status":"affected"},{"version":"2.0.27","status":"affected"},{"version":"2.0.28","status":"affected"},{"version":"2.0.29","status":"affected"},{"version":"2.0.30","status":"affected"},{"version":"2.0.31","status":"affected"},{"version":"2.0.32","status":"affected"},{"version":"2.0.33","status":"affected"},{"version":"2.0.34","status":"affected"},{"version":"2.0.35","status":"affected"},{"version":"2.0.36","status":"affected"},{"version":"2.0.37","status":"affected"},{"version":"2.0.38","status":"affected"},{"version":"2.0.39","status":"affected"},{"version":"2.0.40","status":"affected"},{"version":"2.0.41","status":"affected"},{"version":"2.0.42","status":"affected"},{"version":"2.0.43","status":"affected"},{"version":"2.0.44","status":"affected"},{"version":"2.0.45","status":"affected"},{"version":"2.0.46","status":"affected"},{"version":"2.0.47","status":"affected"},{"version":"2.0.48","status":"affected"},{"version":"2.0.49","status":"affected"},{"version":"2.0.50","status":"affected"},{"version":"2.0.51","status":"affected"},{"version":"2.0.52","status":"affected"},{"version":"2.0.53","status":"affected"},{"version":"2.0.54","status":"affected"},{"version":"2.0.55","status":"affected"},{"version":"2.0.56","status":"affected"},{"version":"2.0.57","status":"affected"},{"version":"2.0.58","status":"affected"},{"version":"2.0.59","status":"affected"},{"version":"2.0.60","status":"affected"},{"version":"2.0.61","status":"affected"},{"version":"2.0.62","status":"affected"},{"version":"2.0.63","status":"affected"},{"version":"2.0.64","status":"affected"},{"version":"2.0.65","status":"affected"},{"version":"2.0.66","status":"affected"},{"version":"2.0.67","status":"affected"},{"version":"2.0.68","status":"affected"},{"version":"2.0.69","status":"affected"},{"version":"2.0.70","status":"affected"},{"version":"2.0.71","status":"affected"},{"version":"2.0.72","status":"affected"},{"version":"2.0.73","status":"affected"},{"version":"2.0.74","status":"affected"},{"version":"2.0.75","status":"affected"},{"version":"2.0.76","status":"affected"},{"version":"2.0.77","status":"affected"},{"version":"2.0.78","status":"affected"},{"version":"2.0.79","status":"affected"},{"version":"2.0.80","status":"affected"},{"version":"2.0.81","status":"affected"},{"version":"2.0.82","status":"affected"},{"version":"2.0.83","status":"affected"},{"version":"2.0.84","status":"affected"},{"version":"2.0.85","status":"affected"},{"version":"2.0.86","status":"affected"},{"version":"2.0.87","status":"affected"},{"version":"2.1.38","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.9,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-04T18:56:46.432496Z","id":"CVE-2026-121535","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"},{"lang":"en","value":"CWE-799"}]}],"references":[{"url":"https://github.com/miroslavpejic85/mirotalk/commit/55bec1d05f931d2e43633d6d0b7274f79ec719dd","source":"cna@vuldb.com"},{"url":"https://github.com/miroslavpejic85/mirotalk/security/advisories/GHSA-x2r2-j5hf-hp36","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports/blob/main/04-mirotalk-checkpassword-oracle.md","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-121535","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/1019995","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430291","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430291/cti","source":"cna@vuldb.com"}]}},{"cve":{"id":"CVE-2026-121539","sourceIdentifier":"cna@vuldb.com","published":"2026-11-03T23:17:34.797","lastModified":"2026-11-03T23:17:34.980","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"miroslavpejic85","product":"MiroTalk P2P","cpes":["cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:*"],"modules":["Socket IO Handler"],"versions":[{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.0.2","status":"affected"},{"version":"2.0.3","status":"affected"},{"version":"2.0.4","status":"affected"},{"version":"2.0.5","status":"affected"},{"version":"2.0.6","status":"affected"},{"version":"2.0.7","status":"affected"},{"version":"2.0.8","status":"affected"},{"version":"2.0.9","status":"affected"},{"version":"2.0.10","status":"affected"},{"version":"2.0.11","status":"affected"},{"version":"2.0.12","status":"affected"},{"version":"2.0.13","status":"affected"},{"version":"2.0.14","status":"affected"},{"version":"2.0.15","status":"affected"},{"version":"2.0.16","status":"affected"},{"version":"2.0.17","status":"affected"},{"version":"2.0.18","status":"affected"},{"version":"2.0.19","status":"affected"},{"version":"2.0.20","status":"affected"},{"version":"2.0.21","status":"affected"},{"version":"2.0.22","status":"affected"},{"version":"2.0.23","status":"affected"},{"version":"2.0.24","status":"affected"},{"version":"2.0.25","status":"affected"},{"version":"2.0.26","status":"affected"},{"version":"2.0.27","status":"affected"},{"version":"2.0.28","status":"affected"},{"version":"2.0.29","status":"affected"},{"version":"2.0.30","status":"affected"},{"version":"2.0.31","status":"affected"},{"version":"2.0.32","status":"affected"},{"version":"2.0.33","status":"affected"},{"version":"2.0.34","status":"affected"},{"version":"2.0.35","status":"affected"},{"version":"2.0.36","status":"affected"},{"version":"2.0.37","status":"affected"},{"version":"2.0.38","status":"affected"},{"version":"2.0.39","status":"affected"},{"version":"2.0.40","status":"affected"},{"version":"2.0.41","status":"affected"},{"version":"2.0.42","status":"affected"},{"version":"2.0.43","status":"affected"},{"version":"2.0.44","status":"affected"},{"version":"2.0.45","status":"affected"},{"version":"2.0.46","status":"affected"},{"version":"2.0.47","status":"affected"},{"version":"2.0.48","status":"affected"},{"version":"2.0.49","status":"affected"},{"version":"2.0.50","status":"affected"},{"version":"2.0.51","status":"affected"},{"version":"2.0.52","status":"affected"},{"version":"2.0.53","status":"affected"},{"version":"2.0.54","status":"affected"},{"version":"2.0.55","status":"affected"},{"version":"2.0.56","status":"affected"},{"version":"2.0.57","status":"affected"},{"version":"2.0.58","status":"affected"},{"version":"2.0.59","status":"affected"},{"version":"2.0.60","status":"affected"},{"version":"2.0.61","status":"affected"},{"version":"2.0.62","status":"affected"},{"version":"2.0.63","status":"affected"},{"version":"2.0.64","status":"affected"},{"version":"2.0.65","status":"affected"},{"version":"2.0.66","status":"affected"},{"version":"2.0.67","status":"affected"},{"version":"2.0.68","status":"affected"},{"version":"2.0.69","status":"affected"},{"version":"2.0.70","status":"affected"},{"version":"2.0.71","status":"affected"},{"version":"2.0.72","status":"affected"},{"version":"2.0.73","status":"affected"},{"version":"2.0.74","status":"affected"},{"version":"2.0.75","status":"affected"},{"version":"2.0.76","status":"affected"},{"version":"2.0.77","status":"affected"},{"version":"2.0.78","status":"affected"},{"version":"2.0.79","status":"affected"},{"version":"2.0.80","status":"affected"},{"version":"2.0.81","status":"affected"},{"version":"2.0.82","status":"affected"},{"version":"2.0.83","status":"affected"},{"version":"2.0.84","status":"affected"},{"version":"2.0.85","status":"affected"},{"version":"2.0.86","status":"affected"},{"version":"2.0.87","status":"affected"},{"version":"2.1.0","status":"affected"},{"version":"2.1.1","status":"affected"},{"version":"2.1.2","status":"affected"},{"version":"2.1.3","status":"affected"},{"version":"2.1.4","status":"affected"},{"version":"2.1.5","status":"affected"},{"version":"2.1.6","status":"affected"},{"version":"2.1.7","status":"affected"},{"version":"2.1.8","status":"affected"},{"version":"2.1.9","status":"affected"},{"version":"2.1.10","status":"affected"},{"version":"2.1.11","status":"affected"},{"version":"2.1.12","status":"affected"},{"version":"2.1.13","status":"affected"},{"version":"2.1.14","status":"affected"},{"version":"2.1.15","status":"affected"},{"version":"2.1.16","status":"affected"},{"version":"2.1.17","status":"affected"},{"version":"2.1.18","status":"affected"},{"version":"2.1.19","status":"affected"},{"version":"2.1.20","status":"affected"},{"version":"2.1.21","status":"affected"},{"version":"2.1.22","status":"affected"},{"version":"2.1.23","status":"affected"},{"version":"2.1.24","status":"affected"},{"version":"2.1.25","status":"affected"},{"version":"2.1.26","status":"affected"},{"version":"2.1.27","status":"affected"},{"version":"2.1.28","status":"affected"},{"version":"2.1.29","status":"affected"},{"version":"2.1.30","status":"affected"},{"version":"2.1.31","status":"affected"},{"version":"2.1.32","status":"affected"},{"version":"2.1.33","status":"affected"},{"version":"2.1.34","status":"affected"},{"version":"2.1.35","status":"affected"},{"version":"2.1.36","status":"affected"},{"version":"2.1.37","status":"affected"},{"version":"2.1.38","status":"affected"},{"version":"2.1.39","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Primary","description":[{"lang":"en","value":"CWE-266"},{"lang":"en","value":"CWE-284"}]}],"references":[{"url":"https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-121539","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/1019996","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430300","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430300/cti","source":"cna@vuldb.com"}]}},{"cve":{"id":"CVE-2026-121565","sourceIdentifier":"3938794e-25f5-4123-a1ba-5cbd7f104512","published":"2026-11-03T23:17:35.080","lastModified":"2026-11-04T12:17:06.410","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys."}],"affected":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","affectedData":[{"vendor":"Tanium","product":"TanOS","versions":[{"version":"1.8.5","lessThan":"1.8.5.0326","versionType":"custom","status":"affected"},{"version":"1.8.6","lessThan":"1.8.6.0193","versionType":"custom","status":"affected"},{"version":"1.9.0","lessThan":"1.9.0.0089","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Asset","versions":[{"version":"1.33","lessThan":"1.33.334","versionType":"custom","status":"affected"},{"version":"1.36","lessThan":"1.36.182","versionType":"custom","status":"affected"},{"version":"1.39","lessThan":"1.39.164","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Comply","versions":[{"version":"2.32","lessThan":"2.32.275","versionType":"custom","status":"affected"},{"version":"2.35","lessThan":"2.35.337","versionType":"custom","status":"affected"},{"version":"2.37","lessThan":"2.37.347","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Connect","versions":[{"version":"5.29","lessThan":"5.29.272","versionType":"custom","status":"affected"},{"version":"5.37","lessThan":"5.37.177","versionType":"custom","status":"affected"},{"version":"5.47","lessThan":"5.47.135","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Integrity Monitor","versions":[{"version":"3.6","lessThan":"3.6.608","versionType":"custom","status":"affected"},{"version":"3.7","lessThan":"3.7.383","versionType":"custom","status":"affected"},{"version":"3.8","lessThan":"3.8.362","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Health Check","versions":[{"version":"1.13","lessThan":"1.13.653","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Endpoint Configuration Toolset Solution","versions":[{"version":"1.51","lessThan":"1.51.61","versionType":"custom","status":"affected"},{"version":"1.59","lessThan":"1.59.51","versionType":"custom","status":"affected"},{"version":"1.71","lessThan":"1.71.26","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Patch","versions":[{"version":"3.24","lessThan":"3.24.328","versionType":"custom","status":"affected"},{"version":"3.28","lessThan":"3.28.346","versionType":"custom","status":"affected"},{"version":"3.32","lessThan":"3.32.383","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Performance","versions":[{"version":"1.25","lessThan":"1.25.196","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Reputation","versions":[{"version":"6.6","lessThan":"6.6.150","versionType":"custom","status":"affected"},{"version":"6.7","lessThan":"6.7.143","versionType":"custom","status":"affected"},{"version":"6.8","lessThan":"6.8.167","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Reveal","versions":[{"version":"2.4","lessThan":"2.4.109","versionType":"custom","status":"affected"},{"version":"2.5","lessThan":"2.5.166","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Threat Response","versions":[{"version":"4.9","lessThan":"4.9.480","versionType":"custom","status":"affected"},{"version":"4.12","lessThan":"4.12.353","versionType":"custom","status":"affected"},{"version":"4.17","lessThan":"4.17.333","versionType":"custom","status":"affected"}]},{"vendor":"Tanium","product":"Provision Host","versions":[{"version":"10.4.100","lessThan":"10.4.100","versionType":"semver","status":"affected"},{"version":"10.8.115","lessThan":"10.8.115","versionType":"semver","status":"affected"},{"version":"10.9.113","lessThan":"10.9.113","versionType":"semver","status":"affected"},{"version":"10.10.189","lessThan":"10.10.189","versionType":"semver","status":"affected"},{"version":"10.11.127","lessThan":"10.11.127","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}]},"weaknesses":[{"source":"3938794e-25f5-4123-a1ba-5cbd7f104512","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://security.tanium.com/TAN-2026-092","source":"3938794e-25f5-4123-a1ba-5cbd7f104512"}]}},{"cve":{"id":"CVE-2026-121581","sourceIdentifier":"cna@vuldb.com","published":"2026-11-03T23:17:35.260","lastModified":"2026-11-03T23:17:35.440","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. The impacted element is an unknown function of the file /api/v1/providers/{id}/test of the component Provider Test-Connection Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"n/a","product":"ArcReel","cpes":["cpe:2.3:a:arcreel:arcreel:*:*:*:*:*:*:*:*"],"modules":["Provider Test-Connection Endpoint"],"versions":[{"version":"0.32.0","status":"affected"},{"version":"0.33.0","status":"affected"},{"version":"0.34.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"references":[{"url":"https://github.com/ArcReel/ArcReel/","source":"cna@vuldb.com"},{"url":"https://github.com/ArcReel/ArcReel/security/advisories/GHSA-hrr6-72vw-wgx5","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports/blob/main/06-arcreel-provider-test-ssrf.md","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-121581","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/1019997","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430416","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430416/cti","source":"cna@vuldb.com"}]}},{"cve":{"id":"CVE-2026-121582","sourceIdentifier":"cna@vuldb.com","published":"2026-11-03T23:17:35.503","lastModified":"2026-11-03T23:17:35.670","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been found in Umami up to 3.4.1. Impacted is an unknown function of the file src/app/api/record/route.ts of the component Record API Endpoint. Such manipulation of the argument Website leads to authorization bypass. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"n/a","product":"Umami","cpes":["cpe:2.3:a:umami:umami:*:*:*:*:*:*:*:*"],"modules":["Record API Endpoint"],"versions":[{"version":"3.4.0","status":"affected"},{"version":"3.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Primary","description":[{"lang":"en","value":"CWE-285"},{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://github.com/umami-software/umami/security/advisories/GHSA-4cww-5p37-v8r2","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports","source":"cna@vuldb.com"},{"url":"https://github.com/waterhunter2000-svg/vulnerability-reports/blob/main/02-umami-record-unauth-write.md","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-121582","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/1019998","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430425","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/430425/cti","source":"cna@vuldb.com"}]}},{"cve":{"id":"CVE-2026-121727","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.043","lastModified":"2026-11-03T23:17:36.043","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over many concurrent POST, PUT or DELETE connections, wrapping content_length to grow buffers unbounded and exhaust worker memory."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jorisvink","product":"kore","defaultStatus":"unaffected","packageURL":"pkg:github/jorisvink/kore","versions":[{"version":"0","lessThan":"4.3.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-191"}]}],"references":[{"url":"https://github.com/jorisvink/kore","source":"disclosure@vulncheck.com"},{"url":"https://github.com/jorisvink/kore/blob/4.3.0-rc5/src/http.c#L934","source":"disclosure@vulncheck.com"},{"url":"https://github.com/jorisvink/kore/commit/1ff3c0f6f7973dc7fc8bf38369790ef2d8079b3b","source":"disclosure@vulncheck.com"},{"url":"https://kore.io/releases/4.3.0","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/kore-before-4.3.0-integer-underflow-memory-exhaustion-via-http-header-recv","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121728","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.217","lastModified":"2026-11-03T23:17:36.217","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain a CSRF token from /login and POST credentials to /register/step2, which invokes the unchecked GraphQL RegisterAccount mutation to create accounts."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"SourceHut","product":"meta.sr.ht","defaultStatus":"unaffected","repo":"https://git.sr.ht/~sircmpwn/meta.sr.ht","versions":[{"version":"0.56.11","lessThan":"0.89.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://blog.arusekk.pl/posts/srht-disabled-registration-bypass/","source":"disclosure@vulncheck.com"},{"url":"https://git.sr.ht/~sircmpwn/meta.sr.ht/commit/1ea24685a76f6456245d0bc7fe6accf6231c4044","source":"disclosure@vulncheck.com"},{"url":"https://git.sr.ht/~sircmpwn/meta.sr.ht/commit/e471ffe75bb6ef11366e46c3b721dd0278f746b5","source":"disclosure@vulncheck.com"},{"url":"https://git.sr.ht/~sircmpwn/meta.sr.ht/refs/0.89.0","source":"disclosure@vulncheck.com"},{"url":"https://git.sr.ht/~sircmpwn/meta.sr.ht/tree/0.88.9/item/metasrht/blueprints/auth.py#L121","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/sourcehut-meta-sr-ht-0.56.11-before-0.89.0-registration-authorization-bypass-via-register-step2","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121729","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.407","lastModified":"2026-11-04T19:17:32.063","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"0xdps","product":"emailflare","defaultStatus":"unaffected","packageURL":"pkg:github/0xdps/emailflare","versions":[{"version":"0","lessThan":"cf31f33bbb4a324d5353b8a5db0312fedc19618f","versionType":"git","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-04T18:57:24.607788Z","id":"CVE-2026-121729","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://github.com/0xdps/emailflare","source":"disclosure@vulncheck.com"},{"url":"https://github.com/0xdps/emailflare/blob/d448ea205937a5e82683f89013d4c23159da5b7d/services/inbox-worker/src/routes/keys.ts","source":"disclosure@vulncheck.com"},{"url":"https://github.com/0xdps/emailflare/commit/cf31f33bbb4a324d5353b8a5db0312fedc19618f","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/emailflare-before-commit-cf31f33-missing-authorization-via-api-keys-routes","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121730","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.590","lastModified":"2026-11-03T23:17:36.590","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Cloudflare send call, to impersonate other users or the organization to external recipients."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"0xdps","product":"emailflare","defaultStatus":"unaffected","packageURL":"pkg:github/0xdps/emailflare","versions":[{"version":"0","lessThan":"cf31f33bbb4a324d5353b8a5db0312fedc19618f","versionType":"git","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://github.com/0xdps/emailflare","source":"disclosure@vulncheck.com"},{"url":"https://github.com/0xdps/emailflare/blob/d448ea205937a5e82683f89013d4c23159da5b7d/services/inbox-worker/src/routes/inbox/compose.ts","source":"disclosure@vulncheck.com"},{"url":"https://github.com/0xdps/emailflare/commit/cf31f33bbb4a324d5353b8a5db0312fedc19618f","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/emailflare-before-commit-cf31f33-missing-authorization-via-inbox-compose-endpoint","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121731","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.763","lastModified":"2026-11-03T23:17:36.907","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. Attackers can supply payloads without single quotes into IN() clauses to extract administrator password hashes and student records through time-based queries or modify data via stacked statements."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"francoisjacquet","product":"RosarioSIS","defaultStatus":"unaffected","packageURL":"pkg:composer/francoisjacquet/rosariosis","versions":[{"version":"0","lessThan":"12.9","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://github.com/francoisjacquet/rosariosis","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/blob/v12.8.1/modules/Attendance/includes/StudentSummary.php#L119","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/commit/1b809f9761b50c3f6faf9e1b2b5f5e74d63509c1","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/releases/tag/v12.9","source":"disclosure@vulncheck.com"},{"url":"https://gitlab.com/francoisjacquet/rosariosis/-/issues/375","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/rosariosis-before-12.9-sql-injection-via-period-id-in-attendance-absence-report","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121732","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:36.987","lastModified":"2026-11-03T23:17:37.127","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and MassAssignPayments.php. Attackers can substitute foreign student IDs in the student[] POST array of a modfunc=save request to alter other schools' student billing balances, breaking school isolation."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"francoisjacquet","product":"RosarioSIS","defaultStatus":"unaffected","packageURL":"pkg:composer/francoisjacquet/rosariosis","versions":[{"version":"0","lessThan":"12.9","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://github.com/francoisjacquet/rosariosis","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/blob/v12.8.1/modules/Student_Billing/MassAssignFees.php#L15","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/blob/v12.8.1/modules/Student_Billing/MassAssignPayments.php#L16","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/commit/a8bb460aacb11661934e6e91fbe0d8158fbc0c4f","source":"disclosure@vulncheck.com"},{"url":"https://github.com/francoisjacquet/rosariosis/releases/tag/v12.9","source":"disclosure@vulncheck.com"},{"url":"https://gitlab.com/francoisjacquet/rosariosis/-/issues/376","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/rosariosis-before-12.9-improper-authorization-via-student-billing-mass-assignment","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121733","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:37.177","lastModified":"2026-11-04T19:17:32.230","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows authenticated customers to upload HTML files via the RMA send-message endpoint without type or extension validation. Attackers can upload a .html attachment containing JavaScript served under /storage/rma-conversation/, executing script in the shop's origin when an administrator opens it."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Webkul","product":"Bagisto","defaultStatus":"unaffected","packageURL":"pkg:github/bagisto/bagisto","versions":[{"version":"0","lessThan":"2.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-04T18:58:00.446403Z","id":"CVE-2026-121733","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"references":[{"url":"https://github.com/bagisto/bagisto","source":"disclosure@vulncheck.com"},{"url":"https://github.com/bagisto/bagisto/blob/v2.4.4/packages/Webkul/Shop/src/Http/Controllers/Customer/Account/RMAController.php#L408","source":"disclosure@vulncheck.com"},{"url":"https://github.com/bagisto/bagisto/commit/204e43c26705b66ef2ddfb2a9eebb25f5e8f6a2c","source":"disclosure@vulncheck.com"},{"url":"https://github.com/bagisto/bagisto/commit/e28db3e8c53a94a99cf153ac338466720acd9004","source":"disclosure@vulncheck.com"},{"url":"https://github.com/bagisto/bagisto/releases/tag/v2.4.5","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/bagisto-before-2.4.5-stored-xss-via-rma-conversation-attachment-upload","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121734","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:37.360","lastModified":"2026-11-03T23:17:37.360","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name from public fork pull request comments to retrieve plaintext environment variables and preview basic-auth credentials."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"zane-ops","product":"zane-ops","defaultStatus":"unaffected","packageURL":"pkg:github/zane-ops/zane-ops","versions":[{"version":"1.14.0","lessThan":"1.15.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://github.com/zane-ops/zane-ops","source":"disclosure@vulncheck.com"},{"url":"https://github.com/zane-ops/zane-ops/blob/v1.15.1/backend/zane_api/views/environments.py#L246-L248","source":"disclosure@vulncheck.com"},{"url":"https://github.com/zane-ops/zane-ops/commit/0f3e30403a605dc155a664bc70722c74159a6494","source":"disclosure@vulncheck.com"},{"url":"https://github.com/zane-ops/zane-ops/releases/tag/v1.15.2","source":"disclosure@vulncheck.com"},{"url":"https://github.com/zane-ops/zane-ops/security/advisories/GHSA-r87v-8542-wx9q","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/zaneops-1.14.0-before-1.15.2-cross-workspace-information-disclosure-via-reviewpreviewenvdeployapiview","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121735","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:37.540","lastModified":"2026-11-03T23:17:37.540","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. Attackers who obtain an old confirmation link from a compromised mailbox, backup, or forwarded mail can activate unconfirmed accounts and evade the unconfirmed-account cleanup job."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"blueprintue","product":"blueprintue-self-hosted-edition","defaultStatus":"unaffected","packageURL":"pkg:github/blueprintue/blueprintue-self-hosted-edition","versions":[{"version":"0","lessThan":"4.3.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"references":[{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition","source":"disclosure@vulncheck.com"},{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition/blob/v4.3.3/app/models/UserModel.php#L361-L368","source":"disclosure@vulncheck.com"},{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition/commit/8bba1615bf76b144ac5cd72637c243490f08bc37","source":"disclosure@vulncheck.com"},{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition/pull/266","source":"disclosure@vulncheck.com"},{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition/releases/tag/v4.3.4","source":"disclosure@vulncheck.com"},{"url":"https://github.com/blueprintue/blueprintue-self-hosted-edition/security/advisories/GHSA-qp6g-7v4v-33r9","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/blueprintue-self-hosted-edition-before-4.3.4-non-expiring-account-confirmation-tokens","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-121736","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-11-03T23:17:37.730","lastModified":"2026-11-03T23:17:37.730","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with client_id, redirect_uri and approved=true to insert unbounded ownerless authorization code records, limited only by rate limiting."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"nocodb","product":"nocodb","defaultStatus":"unaffected","packageURL":"pkg:npm/nocodb","versions":[{"version":"0.300.0","lessThan":"2026.08.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"references":[{"url":"https://github.com/nocodb/nocodb","source":"disclosure@vulncheck.com"},{"url":"https://github.com/nocodb/nocodb/blob/2026.07.0/packages/nocodb/src/modules/oauth/controllers/oauth.controller.ts#L56-L92","source":"disclosure@vulncheck.com"},{"url":"https://github.com/nocodb/nocodb/commit/42128735eba328d157c2e90b98795cb248dc0847","source":"disclosure@vulncheck.com"},{"url":"https://github.com/nocodb/nocodb/releases/tag/2026.08.0","source":"disclosure@vulncheck.com"},{"url":"https://github.com/nocodb/nocodb/security/advisories/GHSA-532v-ccph-m3xg","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/nocodb-0.300.0-before-2026.08.0-unauthenticated-oauth-authorization-code-creation","source":"disclosure@vulncheck.com"}]}}]}